Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
File:                     c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json)
Hash identifier:          49JDz5ciMqLfKDWE57pvExZ1I8rV2kMHSL0IT6A1tAA=
Subject key identifier:   A4:E3:73:32:86:0D:A0:9D:97:C4:FB:48:04:F4:20:03:ED:A8:86:57
Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
Certificate issuer:       /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
Certificate serial:       08C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
Manifest number:          15C2
Signing time:             Wed 22 Jul 2026 18:28:56 +0000
Manifest this update:     Wed 22 Jul 2026 18:28:55 +0000
Manifest next update:     Wed 29 Jul 2026 18:28:55 +0000
Files and hashes:         1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: WDWmfoInJxZgs1Hk8jePmq1RFmSk1b2TlXfvjhMXQI8=)
                          2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: zTGTx7/ZH11Scl6xxtt6/6AQ3HI9XkZHLbDnCzFKfFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2243 (0x8c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
        Validity
            Not Before: Jul 22 18:28:55 2026 GMT
            Not After : Jul 29 18:28:55 2026 GMT
        Subject: CN=6a610be7-4e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:07:e1:ce:01:dc:e0:9c:bb:64:75:d7:f9:
                    a1:1c:1d:98:27:0c:78:e5:44:fd:bb:60:43:a0:5d:
                    98:0e:ef:f0:ea:d4:79:8b:82:bc:0f:02:c9:57:8e:
                    f9:74:92:06:9f:66:b1:35:28:1c:98:b1:4b:99:6f:
                    98:de:58:4b:9a:f1:ec:0d:f1:93:bd:dd:7b:d4:3b:
                    a2:74:4e:d7:4a:36:3f:16:99:83:93:b6:2c:44:c5:
                    92:d2:ea:5f:c7:e7:33:89:4c:b8:eb:58:f3:80:11:
                    a4:ac:e8:07:bc:64:1b:13:15:37:af:a3:62:5e:61:
                    91:cf:8c:07:64:f0:50:43:3c:d0:6d:20:a4:18:ca:
                    23:f2:65:53:b3:c8:bf:15:8d:cc:22:ff:cf:3f:09:
                    8b:0e:b9:d0:f6:17:d4:aa:11:65:22:ed:19:7e:ce:
                    85:11:6c:6c:a9:8f:dd:a2:8e:a6:b0:ff:cd:1d:bf:
                    30:bb:42:8d:9e:fc:0c:41:35:ee:05:df:ee:d9:09:
                    5f:4d:88:89:28:1f:64:74:aa:0b:5a:21:18:2f:88:
                    c4:50:dc:75:9a:94:40:41:32:e7:3d:6a:75:08:2e:
                    aa:a5:ec:d9:7d:97:09:5f:30:35:2c:ec:35:20:85:
                    71:5d:bc:2f:c1:ff:cf:31:94:98:34:0d:e1:cf:f6:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:73:32:86:0D:A0:9D:97:C4:FB:48:04:F4:20:03:ED:A8:86:57
            X509v3 Authority Key Identifier:
                keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1b:64:7f:fc:8b:c3:e8:d8:0e:f1:98:73:38:9f:b5:87:86:
         d1:7e:bd:21:87:28:60:4a:33:67:37:8d:82:0a:42:a6:7a:3e:
         f1:a8:7d:7a:e5:88:c5:81:d6:9c:c9:60:12:4f:96:8b:55:65:
         55:a5:e9:ec:c1:3c:80:6c:ad:2d:e7:6a:35:cc:c5:32:76:2e:
         9b:4f:10:d6:56:7c:48:53:c3:e4:1a:a5:8c:c9:af:51:72:ed:
         84:ec:5f:ff:a6:62:c2:96:00:be:3d:d6:ad:65:71:57:73:06:
         75:93:0b:dc:c0:7e:02:7c:5d:37:1d:6d:a1:bc:ea:a0:80:45:
         42:3a:ba:c6:a2:e6:55:68:e5:54:a2:6c:09:a2:06:3d:df:2b:
         3b:fe:3f:68:b7:d9:71:1f:9b:6f:db:8d:31:1c:e9:db:34:e8:
         ab:c4:88:37:ac:e5:a0:5d:33:7c:fd:f7:2f:22:d4:ba:ed:11:
         1f:b1:32:3d:10:e1:15:61:2f:c5:34:e6:b2:77:0d:dc:ea:0e:
         b9:c7:e0:a5:1c:0b:a4:48:5a:76:00:8d:be:3b:99:77:68:0e:
         69:b8:89:88:9c:18:02:3b:85:1d:01:37:90:51:cb:e7:b5:91:
         75:72:63:6b:f9:c5:39:27:9c:50:46:20:8a:dc:6a:31:54:79:
         ef:89:a3:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz
NzAwMTBDNTkwHhcNMjYwNzIyMTgyODU1WhcNMjYwNzI5MTgyODU1WjAYMRYwFAYD
VQQDEw02YTYxMGJlNy00ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtskH4c4B3OCcu2R11/mhHB2YJwx45UT9u2BDoF2YDu/w6tR5i4K8DwLJV475
dJIGn2axNSgcmLFLmW+Y3lhLmvHsDfGTvd171DuidE7XSjY/FpmDk7YsRMWS0upf
x+cziUy461jzgBGkrOgHvGQbExU3r6NiXmGRz4wHZPBQQzzQbSCkGMoj8mVTs8i/
FY3MIv/PPwmLDrnQ9hfUqhFlIu0Zfs6FEWxsqY/doo6msP/NHb8wu0KNnvwMQTXu
Bd/u2QlfTYiJKB9kdKoLWiEYL4jEUNx1mpRAQTLnPWp1CC6qpezZfZcJXzA1LOw1
IIVxXbwvwf/PMZSYNA3hz/Y/VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTjczKG
DaCdl8T7SAT0IAPtqIZXMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2
QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt
TDlkUjVPQlF3NjAzQUJERmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAchtkf/yLw+jYDvGYcziftYeG0X69IYcoYEozZzeNggpCpno+8ah9euWIxYHW
nMlgEk+Wi1VlVaXp7ME8gGytLedqNczFMnYum08Q1lZ8SFPD5BqljMmvUXLthOxf
/6ZiwpYAvj3WrWVxV3MGdZML3MB+AnxdNx1tobzqoIBFQjq6xqLmVWjlVKJsCaIG
Pd8rO/4/aLfZcR+bb9uNMRzp2zToq8SIN6zloF0zfP33LyLUuu0RH7EyPRDhFWEv
xTTmsncN3OoOucfgpRwLpEhadgCNvjuZd2gOabiJiJwYAjuFHQE3kFHL57WRdXJj
a/nFOSecUEYgitxqMVR574mjtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:20 2026 by rpki-client